6916 matches found
Mattermost Input Validation Error Vulnerability (CNVD-2025-22091)
Mattermost is an open source collaboration platform from Mattermost, Inc. in the United States. Mattermost suffers from an input validation error vulnerability that stems from an unvalidated redirectto parameter, which can be exploited by an attacker to cause theft of a user's cookie via a...
CVE-2025-7985
Ashlar-Vellum Cobalt VC6 is affected by an integer overflow in the VC6 file parser that allows remote code execution. The flaw stems from insufficient validation of user-supplied data, enabling an attacker to trigger the overflow during buffer allocation and run code in the caller’s context. Expl...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from a failure to collect data without validating the command type, which could result in an array index out-of-bound...
Ashlar-Vellum Graphite 缓冲区错误漏洞
Ashlar-Vellum Graphite is a CAD modeling software from Ashlar-Vellum. A buffer error vulnerability exists in Ashlar-Vellum Graphite that stems from a lack of validation of user-supplied data when parsing VC6 files, which could lead to out-of-bounds writing and execution of arbitrary code...
CISA Thorium 安全漏洞
CISA Thorium is a highly scalable distributed malware analysis and data generation framework from the U.S. Cybersecurity and Infrastructure Security Administration CISA government division. A security vulnerability exists in CISA Thorium versions prior to 1.1.2 that stems from unvalidated TLS...
Ashlar-Vellum Cobalt 缓冲区错误漏洞
Ashlar-Vellum Cobalt is a parameter-based computer-aided design and 3D modeling program from Ashlar-Vellum. A buffer error vulnerability exists in Ashlar-Vellum Cobalt that stems from a lack of validation of user-supplied data when parsing an AR file, which could lead to an out-of-bounds write th...
Ashlar-Vellum Cobalt 缓冲区错误漏洞
Ashlar-Vellum Cobalt is a 3D modeling software developed by Ashlar Vellum, which supports Windows and Mac systems, and is mainly used for 3D modeling and CAD drawing in industrial product design, architectural design and other fields. Ashlar-Vellum Cobalt suffers from an out-of-bounds read...
Ashlar-Vellum Cobalt 安全漏洞
Ashlar-Vellum Cobalt is a parameter-based computer-aided design and 3D modeling program from Ashlar-Vellum. A security vulnerability exists in Ashlar-Vellum Cobalt that stems from a lack of validation of user-supplied data when parsing a CO file, which could lead to type confusion that could resu...
Denial Of Service (DoS)
pyLoad-ng is vulnerable to Denial of Service DoS. The vulnerability is due to improper input validation because the jk parameter is passed directly to dykpy.evaljs without verification, allowing crafted input to exhaust CPU resources and render the web UI unresponsive...
PT-2025-38499
CVE-2025-10572 - Microsoft IIS Unvalidated Redirect CVE ID : CVE-2025-10572 Published : Sept. 16, 2025, 6:15 p.m. | 43 minutes ago Description : Rejected reason: REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2025-9199. Reason: This candidate is a reservation duplicate of CVE-2025-9199...
PT-2025-38500
Name of the Vulnerable Software and Affected Versions Woo superb slideshow transition gallery with random effect plugin for WordPress versions through 9.1 Description The software is susceptible to SQL Injection through the 'woo-superb-slideshow' shortcode. Insufficient escaping of user-supplied...
Server-side Request Forgery (SSRF)
Overview flowise-components is a Flowiseai Components Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the fetch function in the fetch-links feature when user-supplied URLs are not validated. An attacker can access internal network resources and sensitive...
CVE-2025-9072 One-Click Mattermost Account Takeover via Poisoned RelayState SAML Parameter
Mattermost versions 10.10.x = 10.10.1, 10.5.x = 10.5.9, 10.9.x = 10.9.4 fail to validate the redirectto parameter, allowing an attacker to craft a malicious link that, once a user authenticates with their SAML provider, could post the user’s cookies to an attacker-controlled URL...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from an unvalidated physical address in the FPDT table, which could result in an invalid memory map...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from an unvalidated USB endpoint type that could lead to an internal error...
Mattermost 安全漏洞
Mattermost is an open source collaboration platform from Mattermost, Inc. in the United States. Mattermost suffers from an input validation error vulnerability that stems from an unvalidated redirectto parameter, which can be exploited by an attacker to cause theft of a user's cookie via a...
DataEase 代码问题漏洞
DataEase is an open source data visualization and analysis tool from DataEase Open Source. It is used to help users quickly analyze data and gain insight into business trends for business improvement and optimization. A code issue vulnerability exists in DataEase 2.10.12 and prior versions that...
sql-injection-vulnerability
During the security review of "Pet grooming management", discove...
ChanCMS SQL Injection Vulnerability
ChanCMS is a content management system. ChanCMS 3.3.0 and earlier versions suffer from a SQL injection vulnerability, which originates from the lack of validation of the Search parameter key in the app/modules/api/service/Api.js function against external input SQL statements. An attacker can...
CVE-2025-7746
CWE-79: Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability exists that could cause an unvalidated data injected by a malicious user potentially leading to modify or read data in a victim’s browser...